Fortinet FCSS_NST_SE-7.4 Quiz 1 Topic 2 Questions 1-5

Question: 1

Refer to the exhibit, which shows partial outputs from two routing debug commands.

q1_FCSS_NST_SE-7.4

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

ASet snat-route-change to enable.

BSet the priority of the static default route using port2 to 1.

CSet preserve-session-route to enable.

DSet the priority of the static default route using port1 to 10.

Show Answer

Question: 2

Which statement about parallel path processing is correct (PPP)?

APPP chooses from a group of parallel options lo identity the optimal path tor processing a packet.

BOnly FortiGate hardware configurations affect the path that a packet takes.

CPPP does not apply to packets that are part of an already established session.

DSoftware configuration has no impact on PPP.

Show Answer

Question: 3

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

q3_FCSS_NST_SE-7.4

What two conclusions can you draw Itom the output? (Choose two.)

AThe workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.

BThe logon event can be seen on the collector agent installed on Windows.

CFSSO is using DC agent mode to detect logon events.

DFSSO is using agentless polling mode to detect logon events.

Show Answer

Question: 4

Refer to the exhibit, which shows the output of a policy route table entry.

q4_FCSS_NST_SE-7.4

Which type of policy route does the output show?

AAn ISDB route

BA regular policy route

CA regular policy route, which is associated with an active static route in the FIB

DAn SD-WAN rule

Show Answer

Question: 5

Refer to the exhibit, which contains the output of diagnose vpn tunnel list.

q5_FCSS_NST_SE-7.4

Which command will capture ESP traffic for the VPN named DialUp_0?

Adiagnose sniffer packet any 'ip proto 50'

Bdiagnose sniffer packet any 'host 10.0.10.10'

Cdiagnose sniffer packet any 'esp and host 10.200.3.2'

Ddiagnose sniffer packet any 'port 4500'

Show Answer

Fortinet FCSS_NST_SE-7.4 Quiz:1 Topic:2 Questions:1-5